Loading npm security reports…
Skip to main contentData Exfiltration2026-07-09 16:20Credential Exfiltration2026-07-09 09:52Credential Exfiltration2026-07-09 09:52
npm threat feed
npm credential and data exfiltration reports.
Investigate credential theft and data exfiltration, including attempts to send secrets or other sensitive data to an outside recipient. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 66
Updated 10 Oct 2026, 11:51 UTC. Ordered by latest scan.
testing-d3do@99.9.9
Source inspection confirms concrete install-time collection and exfiltration of host identity data to an external endpoint. This is malicious behavior, not merely suspicious network capab...
@wagni_bot/eth-agent@1.0.0
Source inspection confirms unconsented install-time secret harvesting and external exfiltration in postinstall.js. This is concrete malicious behavior, not package-aligned SDK functionality.
@wagni_bot/polymarket-sdk@1.0.0
The provided scanner snippets indicate concrete install-time exfiltration behavior, but finalization requires direct source inspection and this environment did not permit further tool use...
@wagni_bot/metemask-sdk@1.0.0
Direct source inspection confirms unconsented install-time credential harvesting and external exfiltration unrelated to an SDK. This is concrete malicious behavior, not merely a suspiciou...